file[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
file.exe
Size 191KB
Sample230120-dfkvrabd95
SHA256 647565da343844bb25318202324106be70435f0d7accbcba2bbbd4353460d422
MD5 3eef8f4adc25b44154c53175bdb18ebd
SHA1 fd8e09173fbddea18496b0da60b05e4d7651e281
SHA512 8842520dd049149af77f61df4591af671acd35e27d3977b6fd402078434ea145f4e1596b29cb184df2b3e10b3b490aea6540c43a76b661682c3f76e653426526
SSDEEP 3072:8BN4X3CGC6v68rUE00rWv5bcXsCpKot9R6vjDcGaxnl5KZDDANhBM:0qW63s0rWlgsKKot92U7xnQ
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

file.exe

.exe 191KB

file.exe

IMPHASH b7fe544335f8a4238fde8ffc9deb4a27
SHA256 647565da343844bb25318202324106be70435f0d7accbcba2bbbd4353460d422
MD5 3eef8f4adc25b44154c53175bdb18ebd
SHA1 fd8e09173fbddea18496b0da60b05e4d7651e281
SHA512 8842520dd049149af77f61df4591af671acd35e27d3977b6fd402078434ea145f4e1596b29cb184df2b3e10b3b490aea6540c43a76b661682c3f76e653426526
SSDEEP 3072:8BN4X3CGC6v68rUE00rWv5bcXsCpKot9R6vjDcGaxnl5KZDDANhBM:0qW63s0rWlgsKKot92U7xnQ
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

31622

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcessPriorityBoost GetConsoleAliasA CreateFileW GetSystemWindowsDirectoryW GlobalHandle FindFirstVolumeMountPointW CreateDirectoryExA ReleaseActCtx GetLogicalDriveStringsW ReadConsoleInputW GetComputerNameExA GetTempPathA GetCurrentDirectoryA DebugBreak LCMapStringW GetProcAddress GlobalAlloc IsDebuggerPresent FindActCtxSectionStringA GetLastError LoadLibraryW CreateNamedPipeW LocalFlags GetModuleHandleA GetConsoleAliasesLengthW CreateFileA GetVolumePathNameW ProcessIdToSessionId OpenFileMappingW lstrcmpW AddRefActCtx SetConsoleScreenBufferSize GetComputerNameA lstrcpynW GenerateConsoleCtrlEvent CopyFileW DosDateTimeToFileTime TlsGetValue CreateActCtxW DeleteVolumeMountPointW MoveFileWithProgressW ResetEvent CreateMailslotA WriteConsoleInputW GetTempPathW InterlockedCompareExchange EnumTimeFormatsA FindNextFileA VerifyVersionInfoA GetConsoleAliasW GetNumberOfConsoleInputEvents GetConsoleTitleW GetVolumeNameForVolumeMountPointW LoadLibraryA CloseHandle MultiByteToWideChar WideCharToMultiByte HeapReAlloc HeapAlloc GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter HeapFree GetCPInfo InterlockedIncrement InterlockedDecrement GetACP GetOEMCP IsValidCodePage GetModuleHandleW TlsAlloc TlsSetValue TlsFree SetLastError GetCurrentThreadId DeleteCriticalSection LeaveCriticalSection EnterCriticalSection HeapCreate VirtualFree VirtualAlloc SetHandleCount GetStdHandle GetFileType Sleep ExitProcess WriteFile GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime LCMapStringA GetStringTypeA GetStringTypeW GetLocaleInfoA InitializeCriticalSectionAndSpinCount RtlUnwind SetFilePointer GetConsoleCP GetConsoleMode RaiseException FlushFileBuffers SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW ReadFile HeapSize DeleteFileA

gdi32

GetBrushOrgEx

advapi32

SetThreadToken

shell32

FindExecutableA

msimg32

AlphaBlend